Hacking Swagger-UI - from XSS to account takeovers

We have reported more than 60 instances of this bug across a wide range of bug bounty programs including companies like Paypal, Atlassian, Microsoft, GitLab, Yahoo

Swagger API. API Hacking, by ghostlulz

Bug Bounty Radar // The latest bug bounty programs for June 2022

XSS Vulnerability with Swagger UI v3 · Issue #3847 · swagger-api/swagger-ui · GitHub

GitHub - rodolfomarianocy/Tricks-Web-Penetration-Tester: Web Application Penetration Testing

How I was able to steal users credentials via Swagger UI DOM-XSS, by Mohamed reda

Swagger API. API Hacking, by ghostlulz

Swagger UI reveals unauthenticated endpoint leaking sensitive data

Kelvin Wanja on LinkedIn: #hacking #hacking #development #bugbounty #bugbountytips

Hacking Swagger-UI - from XSS to account takeovers

Feihui (@Feihui11) / X